Vulnerability Details CVE-2006-2039
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/19776
- http://sourceforge.net/project/shownotes.php?release_id=411859
- http://www.securityfocus.com/bid/17676
- http://www.vupen.com/english/advisories/2006/1492
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26040
- http://secunia.com/advisories/19776
- http://sourceforge.net/project/shownotes.php?release_id=411859
- http://www.securityfocus.com/bid/17676
- http://www.vupen.com/english/advisories/2006/1492
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26040
Products affected by CVE-2006-2039
-
cpe:2.3:a:ubertec:help_center_live:1.0
-
cpe:2.3:a:ubertec:help_center_live:1.2
-
cpe:2.3:a:ubertec:help_center_live:1.2.1
-
cpe:2.3:a:ubertec:help_center_live:1.2.2
-
cpe:2.3:a:ubertec:help_center_live:1.2.3
-
cpe:2.3:a:ubertec:help_center_live:1.2.4
-
cpe:2.3:a:ubertec:help_center_live:1.2.5
-
cpe:2.3:a:ubertec:help_center_live:1.2.6
-
cpe:2.3:a:ubertec:help_center_live:1.2.7
-
cpe:2.3:a:ubertec:help_center_live:1.2.8
-
cpe:2.3:a:ubertec:help_center_live:2.0